Uploaded image for project: 'Accumulo'
  1. Accumulo
  2. ACCUMULO-3690

Unintended limitations on tracer host WRT kerberos principal

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • None
    • 1.7.0
    • monitor, trace
    • None

    Description

      billie.rinaldi noticed a problem while testing out some Kerberos stuff. The monitor performs a login using general.kerberos.*, but then tries to get a connector as the trace user which is guaranteed to fail when general.kerberos.principal doesn't match up with the tracer's principal.

      For example, the Monitor can only fetch traces when tracer is same principal. Similarly, the trace server logs in with general.kerberos.keytab, but then tries to use trace.user to make a connector which will only work when the two are the same.

      Attachments

        Activity

          People

            elserj Josh Elser
            elserj Josh Elser
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0h
                0h
                Logged:
                Time Spent - 20m
                20m